Akamai: web application attacks on the gaming industry increased 167% YoY from May 2021-April 2022, and 37% of all DDoS attacks were against the gaming sector
Leigh Mc Gowran / Silicon Republic : Thanks: @leigh_mc_gowran
Context & Ripple Effects
Gaming was already a proven attack surface before this report: Akamai counted 55 billion credential stuffing attacks between November 2017 and March 2019, and the sector's mix of always-on services, valuable accounts, and competitive player bases made it a standing target. The new numbers extend that arc — web application attacks on gaming up 167% year-over-year and 37% of all DDoS traffic aimed at one sector.
The timing matters because the attack economics have shifted: Cloudflare's Q4 2021 data showed ransom DDoS attacks up 29% YoY and 175% quarter-over-quarter, meaning DDoS increasingly functions as extortion rather than vandalism — and a sector whose revenue depends on live uptime is exactly where that model pays.
First-order effects
- Game publishers and platform operators face a direct cost shift: mitigating a 167% surge in web application attacks and absorbing more than a third of global DDoS volume pushes security spending from optional to core infrastructure for any live-service title.
- Players bear the immediate impact through login outages, degraded matchmaking, and account-takeover attempts riding on the same credential-stuffing pressure Akamai documented in 2019.
Second-order effects
- Edge and security vendors — Akamai chief among them, since its threat research doubles as demand generation for its mitigation products — compete harder for gaming contracts, while ransom-DDoS operators rationally concentrate on gaming where downtime converts fastest into paid extortion.
- The financial sector's parallel experience, where FS-ISAC measured DDoS against banks up 22% YoY by late 2022 (73% in Europe), suggests mitigation vendors can package gaming playbooks for other uptime-critical verticals, broadening the market beyond games.
Third-order effects
- If the pattern holds, DDoS-for-ransom cements itself as a recurring line of business rather than episodic hacktivism, forcing every latency-sensitive industry to treat volumetric and application-layer defense as a permanent operating expense — the way banks already do.
- Sector-by-sector attack waves (gaming now, finance concurrently) point toward attackers allocating effort by monetizability, which structurally advantages large edge-security platforms that can absorb attack traffic at scale over smaller providers.
The trend: Attackers are concentrating on sectors where uptime equals revenue, with gaming joining finance as a primary DDoS and application-layer target and extortion becoming the dominant motive.